KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio
Summary
GSD-2021-1001289: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio. Affects Kernel versions >= 2a20592baff59c5351c5200ec667e1a2aa22af85, < 679837dc0abaa2c6e2a7bcd86483e05eee1d5066. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components. KVM (Kernel-based Virtual Machine) is a module within the Kernel package that enables virtualization on Linux systems. It allows users to run multiple virtual machines on a single physical machine. The mmio (Memory-Mapped I/O) subsystem in KVM handles memory access for devices and peripherals in virtual machines. This vulnerability specifically affects the kvm_vm_ioctl_unregister_coalesced_mmio function in the mmio subsystem.
Vulnerability Detail
The vulnerability in kvm_vm_ioctl_unregister_coalesced_mmio is a use-after-free Read issue. This means that after a memory region is freed, it is still accessed or read by the program, leading to potential crashes, data corruption, or even remote code execution. An attacker could exploit this vulnerability by triggering the use-after-free condition and manipulating the freed memory to execute arbitrary code or gain elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in kvm_vm_ioctl_unregister_coalesced_mmio can be addressed by updating the Linux Kernel package to version v5.10.52 or later. This update includes the necessary fix to prevent the use-after-free Read issue. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
KVM (Kernel-based Virtual Machine) is a module within the Linux Kernel that enables virtualization on Linux systems. It allows users to run multiple virtual machines on a single physical machine, providing isolation and resource management for each virtual machine.
mmio (Memory-Mapped I/O) is a subsystem in KVM that handles memory access for devices and peripherals in virtual machines. It provides a mechanism for virtual machines to communicate with and access memory-mapped devices.
A use-after-free vulnerability occurs when a program continues to use or access memory that has been freed. This can lead to crashes, data corruption, or even remote code execution if an attacker can manipulate the freed memory.
An attacker could exploit this vulnerability by triggering the use-after-free condition in kvm_vm_ioctl_unregister_coalesced_mmio and manipulating the freed memory. This could allow them to execute arbitrary code or gain elevated privileges.
No, the impact and attack plausibility of this vulnerability have not been proven yet. Further analysis and testing are required to determine the full extent of its impact.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
